URPF Configuration

show interface urpf

[Command] show interface urpf

[Purpose] Check the URFP enable mode for the interface

[View] System view

[Use Cases]

sonic# show interface urpf
  Interfaces    Status
------------  --------

ip urpf {strict|loose}

[Command] ip urpf {strict|loose}

[Purpose] Enable URPF mode on the interface

[Parameter]

Parameter	Description
strict	Not only requires verifying whether the traffic has a return route, but also verifying that the return interface matches the original ingress interface
loose	Only checks whether there is a return route for the traffic; if one exists, the traffic is allowed through; if not, it is discarded

[View] Interface Configuration View

[Usage Scenario] Enable the URPF feature at the traffic ingress interface to detect whether traffic has a return path, ensuring that the server is not overwhelmed by unknown traffic.

[Notes] After enabling the URPF feature in strict mode on an interface, direct connections to the router cannot be pinged, and OSPF and BGP neighbors cannot establish connections normally. After configuring the ECMP feature, enabling URPF on the interface does not take effect. The URPF feature is only effective on the interface through which traffic enters.

[Use Cases]

sonic# configure
sonic(config)# interface ethernet 1
sonic(config-if-1)# ip urpf strict